On 02/27/2018 04:34 AM, HÖGLUND, Göran wrote:
> A typo by me I am trying to port forward SSH not http.
> Sorry
> 
> I'll look at the link you sent me.
> 
> -----Ursprungligt meddelande-----
> Från: Matt Darfeuille [mailto:matd...@gmail.com] 
> Skickat: den 27 februari 2018 13:30
> Till: shorewall-users@lists.sourceforge.net
> Ämne: Re: [Shorewall-users] Shorewall dnat to virtualbox guest
> 
> On 2/27/2018 11:42 AM, HÖGLUND, Göran wrote:
>> Hi
>>
>> I am trying to dnat port 80 from an network interface (eth0) to a 
>> virtual machine guest’s host only interface.
>>
>>  
>>
>> The host machine uses shorewall and the zone file looks like this:
>>
>> fw              firewall
>>
>> net             ipv4
>>
>> vh              ipv4
>>
>>  
>>
>> interfaces:
>>
>> net     eth0
>>
>> vh      vboxnet0
>>
>>  
>>
>> policy:
>>
>> fw             all             ACCEPT
>>
>> all             all             DROP
>>
>>  
>>
>> my dnat rule:
>>
>> DNAT            net     vh:192.168.56.2:22        tcp     2222
>>
>>  
>>
>> Connecting to the guest from the host works fine.
>>
>> I can see the traffic on port 2222 hitting the eth0 interface but 
>> nothing is relayed to the guest on the virtual network.
>>
>>  
>>
>> What am I missing??
>>
>>  
>>
>> Thanks Göran
>>
> 
> If the following doesn't help, please do as describe at:
> 
> http://shorewall.org/support.htm#Guidelines
> 

Shorewall FAQs 1a and 1b also give DNAT troubleshooting tips.

http://www.shorewall.org/FAQ.htm#faq1a

-Tom
-- 
Tom Eastep        \   Q: What do you get when you cross a mobster with
Shoreline,         \     an international standard?
Washington, USA     \ A: Someone who makes you an offer you can't
http://shorewall.org \   understand
                      \_______________________________________________

Attachment: signature.asc
Description: OpenPGP digital signature

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Shorewall-users mailing list
Shorewall-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to